Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

8 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2024/09/19 12:00 a.m.•4 views

CVE-2024-46946: Improper Input Validation

langchainexperimental aka LangChain Experimental 0.1.17 through 0.3.0 for LangChain allows attackers to execute arbitrary code through sympy.sympify which uses eval in LLMSymbolicMathChain. LLMSymbolicMathChain was introduced in fcccde406dd9e9b05fc9babcbeb9ff527b0ec0c6 2023-10-05...

9.8CVSS6.4AI score0.01387EPSS
SaveExploits1References1
Mend
Mend•added 2024/06/16 12:00 a.m.•6 views

CVE-2024-38459

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

8.5CVSS0.00227EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2024/06/16 12:00 a.m.•7 views

CVE-2024-38459: Incorrect Default Permissions

langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...

7.8CVSS5.8AI score0.00227EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2024/02/26 12:00 a.m.•5 views

CVE-2024-27444: Exposed Dangerous Method or Function

langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...

9.8CVSS6.4AI score0.00773EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2024/02/26 12:00 a.m.•75 views

CVE-2024-27444

langchainexperimental aka LangChain Experimental in LangChain before 0.1.8 allows an attacker to bypass the CVE-2023-44467 fix and execute arbitrary code via the import, subclasses, builtins, globals, getattribute, bases, mro, or base attribute in Python code. These are not prohibited by...

9.9AI score0.00773EPSS
SaveExploits0References1
osv-pysec
osv-pysec•added 2023/10/09 8:15 p.m.•29 views

PYSEC-2023-194

langchainexperimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method...

9.8CVSS7.6AI score0.01039EPSS
SaveExploits0References3
PyPA
PyPA•added 2023/10/09 8:15 p.m.•15 views

PYSEC-2023-194

langchainexperimental 0.0.14 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via the PALChain in the python exec method...

9.8CVSS8.7AI score0.01074EPSS
SaveExploits1References3Affected Software1
CVE
CVE•added 2023/10/09 12:00 a.m.•211 views

CVE-2023-44467

LangChain Experimental (langchain_experimental) in LangChain versions before 0.0.306 is documented to bypass the prior CVE-2023-36258 fix and enable arbitrary code execution via import in Python code, not prohibited by pal_chain/base.py. Nessus notes even older builds (

9.8CVSS8.8AI score0.01039EPSS
SaveIn wildExploits0References1Affected Software1
Rows per page
Query Builder